I’ve made a few sites for work that aren’t our primary focus. The sites used cookies for login and for “required purposes” (storing in progress state). We did all the tracking on the backend, no cookies or client side trackers.

On our go-live form there’s a question “do you use cookies” and it’s yes/no. If you say yes legal block the site from going live without the pre approved cookie banner…

▲

jarofgreen 4 hours ago | parent | next [-]

> We did all the tracking on the backend

Just checking, you do know that still counts as tracking and may fall under GDPR rules? GDPR was never just about cookies.

	▲	maccard 3 hours ago \| parent [-]
		I do but we shouldn’t be talking about cookies in our cookie banner then.

▲

JoshTriplett 3 hours ago | parent | prev [-]

Sounds like your legal department is broken. You should fix that.

I mean that both in the sense of "you, plural" (your company should fix that) and "you, personally" (because diffusion of responsibility is a real issue, and someone needs to actually do it).

	▲	maccard an hour ago \| parent [-]
		It was a 30k person company, I worked for a subsidiary and for better or worse that was not within my circle of concern or circle of influence.